Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
GSD-2024-3327
Vulnerability from gsd - Updated: 2024-04-11 05:03Details
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
Aliases
{
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2024-3327"
],
"id": "GSD-2024-3327",
"modified": "2024-04-11T05:03:27.367458Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2024-3327",
"STATE": "RESERVED"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}
}
}
WID-SEC-W-2024-0836
Vulnerability from csaf_certbund - Published: 2024-04-09 22:00 - Updated: 2024-11-28 23:00Summary
TIBCO JasperReports: Mehrere Schwachstellen
Severity
Hoch
Scope
4 vulnerabilities in this advisory, including CVE-2024-3327.
CVE-2024-3327
Es bestehen mehrere Schwachstellen in TIBCO JasperReports. Diese Fehler bestehen in der UI Request/Response Validation, dem rollenbasierten Multi-Tenancy-Zugriff, der JDBC URL Validation und in den Query Executions Features aufgrund von unsicheren direkten Objektreferenzen und SQL Injection. Ein entfernter, privilegierter Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder Cross-Site Scripting (XSS)-Angriffe durchzuführen. Einige dieser Schwachstellen erfordern eine Benutzerinteraktion, um erfolgreich ausgenutzt zu werden.
Known affected: 2 products